[Snyk] Upgrade http-signature from 1.2.0 to 1.3.6

[snyk-bot]

Snyk has created this PR to upgrade http-signature from 1.2.0 to 1.3.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2021-11-17.

Release notes

Package name: http-signature

• 1.3.6 - 2021-11-17
  

  version 1.3.6 (2021-11-17)

• 1.3.5 - 2020-09-23
  

  Tag v1.3.5

• 1.3.4 - 2020-04-02
  

  version 1.3.4 (2020-04-02)

• 1.3.3 - 2020-04-01
  

  version 1.3.3 (2020-04-01)

• 1.3.2 - 2020-02-24
  

  version 1.3.2 (2020-02-24)

• 1.3.1 - 2019-11-05
  

  version 1.3.1 (2019-11-05)

• 1.3.0 - 2019-11-05
• 1.2.0 - 2017-08-25
  

  Release 1.2.0

from http-signature GitHub release notes

Commit messages

Package name: http-signature

• 391fbe4 Need to update jsprim due to vulnerability in json-schema TritonDataCenter/node-http-signature#123 Need to update jsprim due to vulnerability in json-schema (headers.cookie shouldn't be replaced request/request#125)
• e7a8a00 Add colon after (request-target) (npm WARN request@2.1.1 ... should probably be bugs['url'] request/request#120)
• 868bf82 Cut 1.3.5 (Remove the global i request/request#117)
• 241725d Add keyPassphrase option to signer (Cookie handling kills hand-rolled cookie headers request/request#115)
• 4fda5d0 Add support for created and expires values (Update to Iris Couch URL request/request#110)
• 88b5740 release 1.3.4 (Cookie handling contains bugs request/request#104)
• b83992f Use the algorithm value, not the keyId for the algorithm field in the signature string (querystring nested problem request/request#103)
• 613fb31 Create 1.3.3 release (Implemented cookies - closes issue 82: https://github.com/mikeal/request/issues/82 request/request#102)
• dafcdaa Add support for an opaque param in the Authorization header (Request does not fire requests in parallel? request/request#101)
• 202ebc3 Add support for adding the keyId and algorithm params into the signing string (EMFILE, Too many open files request/request#100)
• 28def30 Use Buffer.isBuffer instead of instanceof (auto parse application/json request/request#99)
• f2b5ee3 Allow for non-string HMAC keys (Inline port numbers in URLs cause request to spawn multiple callback chains which loop "endlessly" request/request#98)
• dde0188 add 'make cutarelease' to publish new versions; use "files" for smaller published package (Added ability to output the buffer request/request#95)
• dee0ee7 Update changelog file to reflect latest changes and bumpver to 1.3.1 (Body parameters for POST request not being set correctly request/request#91)
• a438c3f bump min node version to 0.10 and add CI testing TritonDataCenter/node-http-signature#92 bump min node version to 0.10 and add CI testing (Fix: npm WARN ya-csv@0.1.8 package.json: bugs['web'] should probably be bugs['url'] request/request#93)
• db839cd fix make check (add option followAllRedirects to follow post/put redirects request/request#90)
• c8e8805 Bump version due to Signature header support (POST Redirects request/request#83)
• 2424e96 Updating sshpk version (Can't post binary to multipart requests request/request#86)
• 276bd13 Add Signature header support. (POST Redirects request/request#83)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs